IN THE CLAMS: 

. A method for managing a data object so as to comply with predetemiined 
condition^ for usage of the data object, comprising the steps of: 

- storing the data object in a memory device, where it is accessible by 
meari^ of a data object provider's data processor; 

\r creating, by said data processor, a general set of control data for the 
data object based on said predetermined conditions for usage, said general set of 
control dam comprising at least one or more usage control elements defining 
usages of thkdata object which comply with said predetermined conditions; 

- storing said general set of control data in a memory device, where it is 
accessible by sard data processor; 

- concatenating the general set of control data with a copy of the data 

object; and 

- encrypting at\least the copy of the data object and said one or more 
usage control elements t9 c^e a secure data package which is ready for 
transfer to a user. 

2. A method as set forthi^Pclaiiji 1, wherein the step of encrypting comprises 
encrypting the data object and the general set of control data. 

3. A method as set forth m claim 1, wherein the step of creating control data 
comprises creating an identifier which uniquely identifies the general set of control data. 

4. A method as set forth in claim l\^herein the step of creating a general set of 
control data comprises creating a security control element which identifies a security 
process to be applied before usage of the data object is allowed. 

5. A method as set forth in claim 1, whetein the step of creating a general set of 
control data comprises creating a format control element which identifies the format of 
the control data. 

6. A method as set forth in claim 1, comprising the fiuther steps of: 

- creating, in response to a request for aumorization for usage of the data 
object by a user, a user set of control data, which comprises at least a subset of 
the general set of control data, including at least one\pf said usage control 
elements; 




- using the user set of control data instead of the general set of control 
data said concatenating step; 

using the at least one or usage control element of the user set of control 
data instead of the one or more usage control elements of the general set of 
control data in the encrypting step; 

- chefcking, before allowing transfer of the data package to the user, that 
said request for authorization for usage of the data object has been granted. 

7. A method as^set forth in claim 1, further comprising the steps of receiving in 
said data processor the reWest for authorization for usage by a user; comparing the 
usage for which authorization is requested with said one or more usage control elements 
of the general set of control data and granting the authorization if the usage for which 
authorization is requested complies with the usages defined by said one or more usage 
control elements. 

8. A method as set forth in claiW?, further comprising the step of securing 
payment for the requested authoriza^ usage before granting the authorization. 



9. A method as set forth 
least two constituent data objects 



n claim 6, wherein the data object is composed of at 



and wherein the user set of control data, in response to 
a request for authorization for usage of one of said constituent data objects by a user, is 
created only for that constituent data objecr\and concatenated only with a copy of that 
constituent data object. 

10. A method as set forth in claim 6, mierein the data provider's data processor 
is connected to a data network and the request for authorization is received from a data 
processor of the user, which is also connected to the data network, further comprising 
the step of transferring the data package through the^ata network to the user's data 
processor. 

1 1 . A method as set forth in claim 6, wherein tHe data object is a composite data 
object including at least two constituent data objects and wherein the step of creating a 
general set of control data comprises the step of creating a respective general set of 
control data for each of the constituent data objects and the composite data object and 
wherein the step of creating a user set of control data comprisels the step of creating a 



respectiveVser set of control data for each of the constituent data objects and the 
composite oata object. 

12. A\method as set forth in claim 6, comprising the further step of storing a 
copy of the use\ set of control data in the data object provider's processor. 

13. A method as set forth in claim 1, comprising the further steps of: 

- receiving the data package in a user's data processor; 

- storing the data package in a memory device where it is accessible by 
means of the user's data processor; 

- checking, in response to a request by the user for usage of the data 
object, whether tWe requested usage complies with the usage defined by the at 
least one usage control element of the general set of control data; 

- decrypting, m response to the requested usage complying with the 



usage defined by the a1 
control data, the data ol 
disabling it. 



j^t one imge control element of the general set of 
j(|ect^d^nabling the requested usage, otherwise 



14. A method as set fdrth-iA^laim 6, comprising the further steps of: 

- receiving the jata patkage in a user's data processor; 

- storing the data package in a memory device where it is accessible by 
means of the user's data processor; 

- decrypting the at least one^usage control element of the user set of 
control data; 

- checking, in response to a request by the user for usage of the data 
object, whether the requested usage complies with the usage defined by the at 
least one usage control element of the user set of control data; 

- decrypting, in response to the requested usage complying with the 
usage defined by the at least one usage control element of the user set of control 
data, the data object and enabling the requested usage, otherwise disabling it 

15. A method as set forth in claims 13 or 14, comprising the further steps of 
reconcatenating, after the usage of the data object, the data object and the one or more 
usage control elements, reencrypting at least the data objec\ and the one or more usage 
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control elements, and storing the thus-repackaged data package in the memory of the 
user's d\ta processor. 

16V A method for controlling the usage by a user of a data object so as to 
comply witK predetermined conditions for usage of the data object, comprising the steps 



of: 



storing a data package in a memory device, where it is accessible by 
means of\ data processor of the user, said data package comprising the data 
object and control data, which comprises at least one usage control element 
defining a usage of the data object which complies with the predetermined 
conditions, the\jata object and said at least one usage control element being 
encrypted; 

- receiving^ request by the user for usage of the data object; 



- decrypting me 

- checking, in rj 
object, whether the re 
least one usage contr 




trol data; 

a the request by the user for usage of the data 
usage complies with the usage defined by the at 
nt of the control data; 
- decrypting, \\i respimse to the requested usage complying with the 
usage defined by the at least one usage control element of the control data, the 
data object and enabling the requested usage, otherwise disabling it. 

17. A method as set forth in clairt^ 16, wherein the usage control element is 
updated after the usage of the data object. 

1 8. A method as set forth in claim 1^ wherein said control data comprises an 
indication of the number of times the user is aMiorized to use the data object in 
accordance with said at least one user control element; 

wherein the requested usage of the qata object is only enabled when said 

number of times is one or more; and 

wherein said number of times is decreii^ented by one when the requested 

usage is enabled. 

19. A method as set forth in claim 16, wherein thb^^control data comprise a 
security control element, and fiirther comprising the step oi\carrying out, before each 
usage of the data object, a security procedure defined in the security control element. 



20. A method as set forth in claim 16, wherein the step of checking whether the 
requested usage complies with the usage defined by the at least one usage control 
element comprises the step of checking that the user's data processor is capable of 
carrying out the security procedure specified in the security control element of the user 
set of control data, and if not, disabling the usage. 

21. A memod as set forth in claim 16, comprising the further steps of 
reconcatenating, aftV the usage of the data object, the data object and the one or more 
usage control elements, reencrypting at least the data object and the one or more usage 
control elements, and storing the thus-repackaged data package in the memory or the 
user's data processor. \ 

22. A system for managing a data object so as to comply with predetermined 
conditions for usage of the data object, comprising 

- first means in ihe data object provider's data processor for creating a 
general set of control dataffor the data object based on the predetermined 
conditions for usage, saio-gen^ set of control data comprising at least one or 
more usage control elementsxiefining usages of the data object which comply 
with the predetermined cDnditiWs; 

- storing means, which are accessible by means of said data processor, 
for storing the data object and the general set of control data; 

- concatenating means for concatenating the general set of control data 
with a copy of the data object; and \ 

- encrypting means for encrypting the copy of the data object and at least 
said one or more usage control elements ta create a secure data package, which 
is ready for transfer to a user. \ 

23. A system as set forth in claim 22, further Comprising 

- second means in said data processor foV creating, in response to a 
request for authorization for usage of the data objW by a user, a user set of 
control data, which comprises at least a subset of the general set of control data, 
which subset comprises at least one of said usage control elements; and 



checking means in said data processor for checking that said request for 
authoriza\ion for usage of the data object has been granted before allowing 
transfer of\he data package to the user. 

24. A system as set forth in claim 22, wherein the general set of control data 
comprises a control data element which defines the right to further distribution of the 

data object by the user\ 

25. A system fol^controUing the usage by a user of a data object so as to comply 
with predetermined conditions for usage of the data object, comprising: 

- storing means for storing a data package which comprises a data object 
and a control data comprising at least one usage control element defining a 
usage of the data objec\ which complies with the predetermined conditions; 

- means for decrj^ting the at least one usage control element and the data 

object; 

- checking means fdr cjJscking whether a usage requested by the user 
complies with the usage^defm i by said at least one usage control element; 

for enabling the usage requested by the user when the 
usage complies with the usage d^efmed by said at least one usage control 
element; and 

- disabling means for disabling the usage requested by the user when the 
usage does not comply with the usa^^ defined by said at least one usage control 
element. 

26. A system as set forth in claim 25, fi^er comprising means for repackaging 
the data object after usage thereof. 

27. A method for controlling the usage byva user of data objects so as to comply 
with predetermined conditions for usage of the dat^objects, comprising the steps of: 

- storing at least two data packages in a memory device, where they are 
accessible by a data processor of the user, eacli\said data package comprising a 
data object and a user set of control data, which comprises at least one usage 
control element defining a usage of the data object which complies with the 
predetermined conditions, the data object and said at least one usage control 
elements being encrypted; 



- enabling means 




- decrypting the usage control elements of the user sets of control data; 

- examining theiisage control elements of said at least two data packages 
to find a match; \ 

- using, in response, to the finding of a match, the data processor to carry 
out an action, which is specified in the user sets of control data. 

28. A method as set forth in claim 2|7, comprising the further steps of updating 
the usage control element of each data/Ra^l^^ reconcatenating after the usage of the 
data objects, each of the data object arid its usage control element, reencrypting each of 
the concatenated data objects and its lisage^control element and transferring the 
repackaged data objects to their creatprs. \ 

29. A method as set forth in claim 14 comprising the further steps of 
reconcatenating, after the usage of the data object, the data object and the one or more 
usage control elements, reencrypting at least tm data object and the one or more usage. 



